Do i need the Central Manager ??

Hi,
i have 2 WAE network modules on my 3800 ISR Routers.
if i don't need the GUI for statistics, can i configure a working setup without central manager entity ?, can i do all the configuration directly on each WAE network module and still get all the optimization and performance ?
thanks,

Off the top of my head, disk encryption and the SSL AO are the two big items that will not work without the Central Manager.
The configuration guide is available here:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v417/configuration/guide/cnfg.html
Regards,
Zach

Similar Messages

Cannot delete users from the Central Management Console

I cannot delete users from the Central Management Console. I'm logged in to Enterprise as administrator but still get the following error:
There was an error while writing data back to the server: Sorry, you do not have the right to 'Delete objects' (id - 22) for 'koberg' (id - 725415). Please contact your system or permissions administrator if you require this right.
Thanks in advance for any help on this matter.

Oops, my mistake, sorry. Ok, so the Administrator cannot delete user koberg.
Check top level:
Logon to CMC, browse to Home > Settings and select the Rights tab. These are your top level settings. Factory default will show only Administrators and Everyone. Select the Net Access "Advanced" for the Administrators group. NB: Do not select these group names links - they will jump you out of the top level! On the Advanced rights page, ensure the right to "Delete objects" is explicitly granted.
Then set for the Users top level folder:
In the CMC, browse to Home, and select Users. Select the "Rights" button. Again - NB: Do not select these group names links - they will jump you out of the Users top level folder! Set the Administrators group to "Full Control". Save.
That should be all you need. However, there is a possibility the previous admin was busy setting security not only at the account level, but on groups so we need to verify the user:
In the CMC, browse to Home, and select Users. In the User list, select koberg. In the koberg account page, select the Rights tab. If the Administrators is not set to (Inherited Rights), make it so, and when you select the "Update" button, you should see the Net Access update to "Full Control". If this is the case, you should follow these steps on each account and accomplish this.
And if you still can't delete it, verify the groups:
In the CMC, browse to Home, and select Users. In the User list, select koberg. In the koberg account page, select the "Member of" tab. Note all groups koberg is a member of. Then in the CMC, browse to Home, and select Groups. Select the name hyperlink for the group(s) that koberg belongs to. On the group page, select the Rights tab, and ensure the Administrators have (Inherited Rights) - Full Control on all of these, also. If not, set it.
Finally, I know you inherited this, but let's overview some basics of simplifying your deployment administration. Follow these guidelines, and your administration life will be so much easier.
1. The Everyone group should never have any subgroups. Ever. All accounts on the system are a member of the Everyone group. Adding subgroups to the Everyone group is redundant.
2. For simplicity's sake, Application level access should be set on the Adminstrators Group, and the Everyone group. I know there are customers who add groups to application rights. I don't understand why users would have an account on the system if they are not allowed access to InfoView, but it's your system.
3. From a report object perspective, the Everyone group should be set at the top level to "No Access". This will result in them having no rights on anything at all. You break this inheritance at the application level to give them access to InfoView and other apps. On folders and objects, you ADD groups, then assign (ADD) rights as desired.
4. If you can help it, never explicitly deny a right to any user or group for any object or application. Explicitly deny overrides any other setting. If a user belongs to group A and group B, and group A is explicitly denied a right, you can explicitly grant it for group B or the user all day long, and it will still be denied. Always try to put yourself in the position of adding groups/users, and adding rights, then inheriting as far down the folder tree as you can.

Reg: material needs the batch management

Hi All,
The material needs the batch management. We have created without the batch
first and the few movements were done, then tried to put the flag after the
stock remove and sales order deletion, however could not process. System
messaged as below in italic. Please let me know how we could change the MM
date for the batch. The sales order alive now.
The batch management requirement cannot
be changed for the following reasons:
SD documents exist (orders or deliveries) that have not yet been
processed or that have been processed only in part.
Thanks & Regards
Siva

Hi,
This was asked in LE forum also, please read this thread:
reg. activating batch management for existing materials
You should fully process the sales documents (sales order - delivery - invoice) or you should delete them and after setting batch requirement for your material master you could recreate the them (SO, delivery).
Regards,
Csaba

Issue With Business Objects Installation-STW00213 The Central Management Server has failed to start.

Hi,
I am in the process of installing Business Objects XI 3.1 in one of our server. While installing I am getting the error 'The Central Management Server has failed to start. Press 'retry' to attempt to start it again or 'cancel' to skip any actions dependendent on the Central Management Server. STW00213.'
I have tried re-installing the BO, and also tried installing without giving admin password. But it doesn't work. And also I ahve tried giving the passwords of database and CMS Admin without Sepcia Characters. But it also doesn't work.
If I cancel and install the BO, Server Intelligence Agent is not available in Central Management Server.
Could anyone help on this issue?
Thanks
Prakadesh

Hi Prakadesh,
Try these steps.
1. Stop and disable the service of current SIA. You can do it from start-->run services.msc. Double click the SIA service and change the status to disable.
2. Login into sqlplus and drop all the CMS tables.
3. Create a new SIA pointing to Oracle from the CCM.
4. Start the new SIA and check if all services come up and you are able to login into Manager servers.
If this does not work, check the event viewer for error messages.
Regards
Chinmaya

Central Management Store being accessed is not the active store

We are experiencing issues with our Lync 2013 services after hardening our SQL backend. Even though we have created aliases to the backend database instances and FrontEnd servers is able to access the databases, we are having this error when performing tasks
like enable-csuser or new-clientpolicy from powershell or Lync control panel:
###50023:XdsPublishItems: The central management store being accessed is not the active store. No data can be read or any changes can be made to this store.
Any suggestions or ideas?

Here some guidance that must be followed for Lync Servers
http://blogs.technet.com/b/nexthop/archive/2011/04/12/using-lync-server-2010-with-a-custom-sql-server-network-configuration.aspx
http://technet.microsoft.com/en-us/library/gg195795(v=ocs.14).aspx
Have this been followed ?
Please remember, if you see a post that helped you please click ;Vote As Helpful" and if it answered your question please click "Mark As Answer" Regards Edwin Anthony Joseph

Failed Job Query on Central Management Registered Servers - Host Server is not included in results

The following standard query works great for showing failed jobs on servers. Executing this in Central Management Registered Servers works as expected, but the Host Server results are not listed, and the same query needs to be executed against the host server
too.
e.g.
Registered Servers are defined on Server A
Results are displayed from servers B, C, D & E - but results are not displayed for Server A.
How do we receive results from Server A without having to execute a separate query ?
DECLARE @PreviousDate datetime
DECLARE @Year VARCHAR(4)
DECLARE @Month VARCHAR(2)
DECLARE @MonthPre VARCHAR(2)
DECLARE @Day VARCHAR(2)
DECLARE @DayPre VARCHAR(2)
DECLARE @FinalDate INT
-- Initialize Variables
SET @PreviousDate = DATEADD(dd, -7, GETDATE()) -- Last 7 days
SET @Year = DATEPART(yyyy, @PreviousDate)
SELECT @MonthPre = CONVERT(VARCHAR(2), DATEPART(mm, @PreviousDate))
SELECT @Month = RIGHT(CONVERT(VARCHAR, (@MonthPre + 1000000000)),2)
SELECT @DayPre = CONVERT(VARCHAR(2), DATEPART(dd, @PreviousDate))
SELECT @Day = RIGHT(CONVERT(VARCHAR, (@DayPre + 1000000000)),2)
SET @FinalDate = CAST(@Year + @Month + @Day AS INT)
-- Final Logic
SELECT j.[name],
s.step_name,
h.step_id,
h.step_name,
h.run_date,
h.run_time,
h.sql_severity,
h.message,
h.server
FROM msdb.dbo.sysjobhistory h
INNER JOIN msdb.dbo.sysjobs j
ON h.job_id = j.job_id
INNER JOIN msdb.dbo.sysjobsteps s
ON j.job_id = s.job_id
AND h.step_id = s.step_id
WHERE h.run_status = 0 -- Failure
AND h.run_date > @FinalDate
ORDER BY h.instance_id DESC
John

Hi vsla,
According to your description, I do a test. When I designate a Central Management Servers and create server groups, then execute statements against
multiple configuration targets simultaneously, it
indeed only contains the results of server groups, you need to execute again on the host server (Central Management Servers) then display the results of Central Management Servers, because the Central Management Server cannot be a member
of a group that it maintains.
If you want to get all servers results by executing the statement one time. I recommend you use Local Server Groups, create new register server and add all servers to the Local Server Groups, then right click “new query
“, execute the statements, it will display all results about all servers. There are more details about administering multiple servers using Central Management Servers, you can review the following article.http://technet.microsoft.com/en-us/library/bb895144
http://technet.microsoft.com/en-us/library/bb964743
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support

How can I enable GUI in WAAS Stand By Central Manager

Hi guys,
I'm testing the stand by central manager, the situation is as follows:
When the active central manager goes down I try to access the GUI in stand by central manager but it always sends me the following error
Graphical user interface is not enabled in this standby CM.
Please close this window and go to the Primary CM.
So I think that I have to enable anything but I don't know what, can anybody help me?
Thanks in advance!
Lenin

Currently the switch to a standby CM requires manual intervention.
The benefit of the Central Manager is that it provides configuration management, device management (software upgrades, etc.), reporting, and security services from a single, central location. Note that the security services, such as disk encryption keys, SSL certificates, etc., are available from the Standby CM (in the event that the Primary CM is unavailable) without the need to promote the Standby to Primary.
Regards,
Zach

Central Management Server - where do queries run

I want to monitor performance on a couple remote servers by running DMV's repeatedly.
Is it it possible to run queries on the CMS against remote servers, and store the results in a CMS table?
This might be obvious, but sorry I need your help in understanding... When you run a multi-server query on a CMS, where does the query actually get optimized and ran? On the remote server, or on the CMS itself. I.e., what CPU is
execuing the query? Where does the query get cached? On the remote or CMS? My thinking is that I don't to put additional workload of the monitoring queries on the remote server. Eventhough the impact of running DMV's is said
to be negligible, running many of them repeatedly must put some extra burden on the target server.

Hi District,
Central management servers store a list of instances of SQL Server that is organized into one or more central management server groups. After you create a central management server, one or more server groups, and one or more registered servers,
you can execute queries against a whole group at the same time, however, Central Management Server cannot be a member of a group that it maintains. So when you run DMV statement of remote servers , it could not save the results into your Central management
servers. Meanwhile, actions that are taken by using a central management server group act on all servers in the server group. When you run multiple queries on a Central management server, the queries actually are run on all servers in the server group. If
you want store the results about remote servers in the Central management server, I recommend you using linked server or set up a SSIS package.
For more information, see: Central Management Server
http://technet.microsoft.com/en-us/library/bb895144.aspx
http://technet.microsoft.com/en-us/library/bb934126.aspx
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support

ESA Centralized Management License

Hi all,
my customer provides single ESA Appliance and would like to produce another one (either physical or virtual). I can see there is no Centralized management license on existing single ESA (wiht dual ESA it was automaticaly added in the past). Can somebody point me, how to obtain (order) centralized management license for existing ESA to be able to make configuration cluster with future ESA?
As I understand it right way, there should be no problem to provide configuration cluster with hybrid ESA (Physical and virtual) - Is it true?
Thank you for any help.

You may request the license be provided for your serial number by contacting our Global Licensing team. They will provide you the availability of the Centralized Management feature key based on your contract and appliance.
Please contact our Global Licensing Operations team:
https://tools.cisco.com/SWIFT/LicensingUI/Home
Licensing FAQ
Phone: 1-800-553-2447, opt 3 (You may request to have a case opened for GLO/Licensing.)
Their email directly is: [email protected]
For the virtual appliance - you will need to assure that they build the centralized management feature key into the license XML, and re-provide a fresh XML for your vESA, based on the VLN associated to the vESA. To get this information - please run 'showlicense' on the CLI.
I hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

Central Manager device with Operation IP

The central Manager has IP address to the the server subnet - (customer server subnet)
May I have other IP address due to Opearion center. we will se
customer network..
regrads.
kimqv

A central manager is required to managed all of your accelerators properly / be in a supported configuration.
You don't necessarily need a physical appliance though. We do have a virtual form factor (vWAAS and vCM) that can run on a ESXi hypervisor.
vWAAS is the accelerator version and vCM is the manager version.
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/vwaas/guide/vwaasguide.html#wp69212

Lync 2010 to 2013 Migration DB issue, central management database.

Hello ,
During Lync 2010 to 2013 migration , on my back end database for Lync 2013 I previously created there data base instances on my lync 2013 BE , (RTC,MON, ARC) THERE DIFFERENT ISTNACE using sql server enterprise 2012 .
Now I want to finish the migration by moving the central management server to the lync server 2013.
my question now I tried to create a new DB instance and I face some issue related the space on the server .
can I use any of the existing isnatce which I created before for the (RTC,MON, ARC) or can I sue the default instance which is created by default with sql 2012 server installation .to install the central management database.
do I need a spate instance ? for the new central management store on my lync server 2013
Thanks
MK

Hello
After I run the command
Install-CsDatabase -CentralManagementDatabase -SqlServerFqdn hq-lync2013-be.MYDOMAIN -SqlInstanceName RTC.
-Then
Enable-CsTopology
-Then
Move-CsManagementServer .
And now after the move when I check the logs :
WARNING: The move completed successfully but the following additional steps are required:
Run local setup on the following computers to remove Central Management services that are no longer defined in the topology:
    - HQ-LYNC-FE-01.MYDOMAIN
WARNING: "Move-CsManagementServer" processing has completed with warnings. "2" warnings were recorded during this run.
WARNING: Detailed results can be found at
"C:\Users\MYUSER\AppData\Local\Temp\2\Move-CsManagementServer-0d4806f4-554d-497d-a0dc-0fc98a6e076d.html".
THESE AR ETEH TWO WARININGS :
Warning: Failed to cleanup file store for the new Central Management Server. Error The directory is not empty.
Warning: The move completed successfully but the following additional steps are required:
Run local setup on the following computers to remove Central Management services that are no longer defined in the topology:
- HQ-LYNC-FE-01.MYDOMAIN.
I Run the local setup on both the FE2013 AND FE2010.
now when I run the command :
Get-CsManagementStoreReplicationStatus
UpToDate           : False    (I shutdown this server )
ReplicaFqdn        : HQ-EDGE01.mydomain
LastStatusReport   :
LastUpdateCreation : 3/16/2015 1:52:45 PM
ProductVersion     :
UpToDate           : False
ReplicaFqdn        : HQ-LYNC2013-FE.mydomain
LastStatusReport   :
LastUpdateCreation : 3/16/2015 1:52:45 PM
ProductVersion     :
UpToDate           : False
ReplicaFqdn        : HQ-LYNC-FE-01.mydomain
LastStatusReport   :
LastUpdateCreation : 3/16/2015 1:52:45 PM
ProductVersion     :
UpToDate           : False
ReplicaFqdn        : HQ-LYNC-MA-01.mydomain
LastStatusReport   :
LastUpdateCreation : 3/16/2015 1:52:45 PM
ProductVersion     :
NOW THEER IS REPLICATION ISSUE ?
I notice that service on my lync 2010 SOME OF THEM ARE STOPPED :
FILE TRANSFER AGENT , MASTER REPLICATORE AGENT , CALL PARK SERVICE (ALL ON LYNC 2010)
ALL SERVICE ON 2013 FE IS OK AND RUNNING..
I notice this error in my lync server 2013 vents .
I host the shared file on my lync server 2010 mediation server
Microsoft Lync Server 2013, Master Replicator Agent service encountered an error while accessing a file share and will continuously attempt to access this file share until this issue is resolved. While this condition persists, replication to replica machines
might not occur.
IO failure occurred for Path=\\HQ-LYNC-MA-01.mydomain\LYNCSHARE\1-CentralMgmt-1\CMSFileStore\xds-master\working\replication\tmp. Exception=Access to the path '\\HQ-LYNC-MA-01.mydomain\LYNCSHARE\1-CentralMgmt-1' is denied..
Cause: Possible issues with file share permissions. This can occur if the computer hosting the file share has outdated cached credentials for the computer that is trying to access the file share.
Resolution:
For details about how to resolve file share permission issues, see the product documentation.
SO ANY ADVICE ?
Regards
MK

Cisco WAAS Central Manager

Can someone tell me how to deploy Cisco WAAS Central Manager to manage 100 WAE devices over WAN? Is there any additional devices need to setup redundant design and any license cost included here per device basis to monitor? I need detailed solution to manage WAE devices centrally.

Vinod,
There is no need to buy additional licenses or no need to add per device license on the central manager. You can go with the 294-4G or the 474 device , these can support upto 250 devices. However would suggest you to go with a higher model so in future if you expand , you might want to replace the CM that time.
Also a central manager cannot work as a inline or wccp device nor it can do any optimization.
Regards
Abijith

Advice for WAAS Central Manager?

Hello,
We are building a WAAS lab (not production) for a customer and we recently discovered that we can't use the NME-WAE-502-K9 as the central manager which was very affordable. So we are very disappointed about this. The other equipment are Cisco ISR 2811 (very affordable for building WAAS) with NME-WAE-502-K9 running WAAS 4.1.1 acting as the application accelerators. I have some questions and asking for some advice about some alternative options for us to consider:
What is the cheapest/smallest WAAS option we can use for the WAAS central manager? The only thing I could find is the WAE-512-K9, but maybe there is something else that is smaller and cheaper for consideration.
From what I read, after WAAS software version 4.1.1 it requires the Enterprise and Transport Licencing. Does the WAAS central manager have a 30,60, or 90 day trial that the CM can run before a license is required like most of the Cisco Unified Communications products today?
Thanks in advanced!
-rya

A central manager is required to managed all of your accelerators properly in a supported configuration. You don't necessarily need a physical appliance though. There is also the virtual form factor (vWAAS is the accelerator version and vCM is the manager version) that can run on a ESXi hypervisor.
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/vwaas/guide/vwaasguide.html#wp69212
John
If this is useful please mark as Helpful or Solved.

Viewing Current Users/Sessions Logged onto CMS (Central Management Server)

Post Author: Alanimal
CA Forum: Data Integration
Hi Guys,
When you use the Central Management Console, click on HOME>SERVERS>CMS:(SERVERNAME) - Under the properties for the Central Management Console you can view who is actually logged into the CMS.
How can I create a query in the Query builder that can show me the same data? I am trying to create a web page that will show me only the current logged in users.
Is this possible?
Cheers
Alan

OK There are a lot of errors in the Log file which relate to writing to the install path and as per below.
Property(C): WiseInitAdminError = You must have administrator rights to run this installation. Please login as an administrator and re-run this installation.
Property(C): WiseInitReboot = This system must reboot before the installation can begin. After the reboot the installation will restart automatically. Do you want to reboot this system?
MSI (c) (7C:00) [13:49:00:317]: Note: 1: 1728
MSI (c) (7C:00) [13:49:00:317]: Transforming table Error.
MSI (c) (7C:00) [13:49:00:364]: Transforming table Error.
I have tried installing as Local Administrator as well as a Domain aministrator
Yes the Databse has been populated with tables during the install.
We are reinstalling the OS to make sure it is WIN 2003 R2 sp2 64 Bit which is a supported platform. SQL 2005 is also SP2 64 bit

Https certificate on WAAS Central Manager

Hi,
I wanting to know if it is possible to authenticate the WAAS central manager with a different certificate/key pair than the self-signed certificate/key pair.
I can't find any information about installing my own certificate/key pair.
Thanks in advance

We do have an option for the same:
First you may generate a CSR using:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773266
Once done you can get the cert and import cert and keys on Central Manager using admin option
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773369
"admin"
Specifies that the certificate and key are for the Central Manager admin service. This option can be used only on the Central Manager.
The Central Manager admin service uses a self-signed certificate and key by default. You can use the crypto import pkcs12 admin command to import a custom certificate and key in PKCS12 or PEM format. If you delete the custom certificate and key, the self-signed certificate and key again become active.
Hope this helps,
Swati

Do i need the Central Manager ??

Similar Messages

Maybe you are looking for